During postcommit review for the upcoming v19 release I realized that this
introduced a slight regression in the truncation rules for plain base64. The
checks for padding must check the format to make sure it's a base64url, as per
the attached.
--
Daniel Gustafsson
